![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b33eb9-242a-48d9-ac84-f0c48413bc6e/1/5luh6QGtWet75MM3UjaJelTEMp4.mft
File: 5luh6QGtWet75MM3UjaJelTEMp4.mft (raw, json)
Hash identifier: IUqkxtRXIWdkAlt61cyW5B9XyNsi/YHy+yHftpJ8yVo=
Subject key identifier: 49:F3:DA:DA:04:9A:81:C9:EC:F0:69:C7:9E:BE:2D:34:7B:25:6D:4F
Authority key identifier: E6:5B:A1:E9:01:AD:59:EB:7B:E4:C3:37:52:36:89:7A:54:C4:32:9E
Certificate issuer: /CN=e65ba1e901ad59eb7be4c3375236897a54c4329e
Certificate serial: 018316AE5250B30D3D5F0ED9E17585484CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5luh6QGtWet75MM3UjaJelTEMp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/b33eb9-242a-48d9-ac84-f0c48413bc6e/1/5luh6QGtWet75MM3UjaJelTEMp4.mft
Manifest number: 068D
Signing time: Wed 07 Sep 2022 06:41:06 +0000
Manifest this update: Wed 07 Sep 2022 06:41:06 +0000
Manifest next update: Thu 08 Sep 2022 06:41:06 +0000
Files and hashes: 1: 5luh6QGtWet75MM3UjaJelTEMp4.crl (hash: LIgoumBlzWGUeVvLhYbESAD3nO1NXgg89/QfJOXpUNs=)
2: R6xi-NLfmoHgKEt9P1HuhonVKgw.roa (hash: eM0JpCdaK3y/HnNwwVEVU+w8od2IBLTJHRmaMTl5hdc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:16:ae:52:50:b3:0d:3d:5f:0e:d9:e1:75:85:48:4c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e65ba1e901ad59eb7be4c3375236897a54c4329e
Validity
Not Before: Sep 7 06:41:06 2022 GMT
Not After : Sep 8 06:41:06 2022 GMT
Subject: CN=49f3dada049a81c9ecf069c79ebe2d347b256d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f2:e8:aa:75:e9:0a:0c:cb:bd:f4:95:1b:e2:
84:71:07:89:30:10:dc:4c:03:58:2e:4d:5c:bc:70:
28:54:32:4f:d4:fa:e0:99:f9:22:af:ba:1a:fd:00:
eb:67:a0:e6:bb:b3:ce:7e:5c:82:f1:c5:bf:1b:c9:
79:e2:39:57:cc:4a:1a:5e:4f:18:60:f0:fc:98:0c:
1a:38:c9:2c:20:af:5d:3d:e2:70:6a:a6:ad:60:c0:
15:b0:a6:a1:94:8d:16:3b:8a:4b:9d:7d:e6:13:d0:
16:58:60:cf:7d:54:59:46:50:a4:c1:4b:c6:fc:73:
b7:91:c2:e8:db:83:8f:f9:9a:76:60:78:3e:e2:12:
5a:60:cf:a2:17:25:16:b1:00:6b:6c:8b:9a:4c:ab:
0d:f3:60:70:f6:fa:a0:48:b9:b7:52:3b:bd:64:5b:
72:ad:4c:37:c8:7c:32:7b:e7:a7:46:cc:db:e1:cb:
8c:28:bd:78:f6:89:9e:9a:d2:ba:1c:df:25:22:b2:
5a:f3:3f:09:a1:81:47:04:88:dd:bc:45:8b:02:7d:
7f:e7:fe:7f:da:0a:d3:3e:82:4f:f0:6f:a9:0d:52:
4e:29:8c:83:cd:9f:5f:6b:34:8f:5e:df:ca:9e:22:
03:62:5b:be:a1:77:c5:83:e0:b0:af:44:48:cd:1a:
29:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F3:DA:DA:04:9A:81:C9:EC:F0:69:C7:9E:BE:2D:34:7B:25:6D:4F
X509v3 Authority Key Identifier:
keyid:E6:5B:A1:E9:01:AD:59:EB:7B:E4:C3:37:52:36:89:7A:54:C4:32:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5luh6QGtWet75MM3UjaJelTEMp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b33eb9-242a-48d9-ac84-f0c48413bc6e/1/5luh6QGtWet75MM3UjaJelTEMp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b33eb9-242a-48d9-ac84-f0c48413bc6e/1/5luh6QGtWet75MM3UjaJelTEMp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:0e:20:8e:4e:dd:53:37:6d:d7:3f:89:e6:8b:e7:30:85:cd:
ed:5a:97:61:b7:8a:65:01:f8:f2:b3:bf:e5:14:f2:f7:bf:fc:
46:ba:91:50:aa:c4:59:90:32:ae:2e:1f:cf:96:82:84:f1:a8:
61:51:5e:d5:14:d2:bd:c5:89:e2:72:1a:53:4e:1e:e4:6a:69:
ab:74:ec:24:36:ff:2b:a9:39:5c:d6:31:cc:c5:6c:a8:3a:7c:
96:99:1b:0e:ae:e8:31:62:57:43:b6:8d:3a:29:05:9d:80:21:
9b:8e:d0:f1:9d:8e:78:25:6a:5f:4a:01:e7:ef:9c:a4:e7:50:
b5:2a:5b:5b:40:bd:b8:a9:ea:9c:b2:67:78:c0:b5:a2:a2:06:
20:f5:d6:71:95:f8:b1:b9:d1:8f:27:a0:a7:06:61:3d:b9:69:
e5:f8:3d:bb:2d:3d:67:07:05:fb:42:cc:42:bc:ba:17:05:ee:
85:f7:ea:2b:1e:1f:d3:9c:b9:de:24:0d:78:72:a7:6b:4c:0b:
9e:ee:c6:cf:20:c9:67:b3:0b:41:06:2e:44:22:ec:80:b5:05:
f8:64:11:e9:62:e5:8f:a5:d4:43:c8:c7:70:cc:d2:ed:6b:6f:
9a:d3:51:e4:b0:f5:ca:c2:2e:d2:92:b8:84:f4:fe:ce:fb:62:
14:e5:42:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:28 2025 by rpki-client